Subnet; Sslcomsecurity - HP NonStop SSL Reference Manual

See also
DESTIPADDR, DESTIPPORT

SUBNET

Use this parameter to specify the TCP/IP process HP NonStop SSL should listen on for incoming connections.
Parameter Syntax
SUBNET tcpip-process-name
Arguments
tcpip-process-name
the name of an existing TCP/IP process on your system.
Default
If omitted, the HP NonStop SSL process will be bound to "$ZTC0".
Example
SUBNET $ZTC03
Considerations
•
If you added a DEFINE =TCPIP^PROCESS^NAME to the TACL environment you use to start SSLOBJ, this
setting will override the SUBNET parameter.
•
If you use TCPIPV6 and want to share identical ports across multiple HP NonStop SSL processes, you need to
add an identical DEFINE to all instances sharing that port as in the following example (please refer to the HP
NonStop manual " TCP/IPv6 Configuration and Management Manual ", section 3, subsection "Monolithic
Listening Model" for more details):
ADD DEFINE =PTCPIP^FILTER^KEY, class map, file A1234
•
If running in IPMODE DUAL, the specified subnet must support both IPv4 and IPv6.

SSLCOMSECURITY

Use this parameter to restrict the execution of SSLCOM commands.
Parameter Syntax
SSLCOMSECURITY boolean
Arguments
boolean
if set to TRUE, "sensitive" SSLCOM commands can only be executed by
a) a member of the SUPER group
b) the user under which the SSLOBJ process in running
Default
The default for this parameter is FALSE.
Example
SSLCOMSECURITY TRUE
Considerations
HP NonStop SSL Reference Manual
Configuration • 75